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We consider broadcast applications where the transmissions need to be encrypted, such 
as direct broadcast digital TV networks or Internet multicast. In these applications the 
number of encrypted TV programs may be very large, but the secure memory capacity ... 
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To speak about the security of information flow in programs employing cryptographic 
operations, definitions based on computational indistinguish ability of distributions over 
program states have to be used. These definitions, as well as the accompanying ... 
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To speak about the security of information flow in programs employing cryptographic 
operations, definitions based on computational indistinguish ability of distributions over 
program states have to be used. These definitions, as well as the accompanying ... 
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Wireless ad hoc networks are envisioned to be randomly deployed in versatile and 
potentially hostile environments. Hence, providing secure and uninterrupted 
communication between the un-tethered network nodes becomes a critical problem. In 
this paper, ... 
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Attackers often try to evade an intrusion detection system (IDS) when launching their 
attacks. There have been several published studies in evasion attacks, some with 
available tools, in the research community as well as the "hackers" community. Our ... 
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The 3G cellular access security architectures do not provide satisfactorily user privacy 
and fail to fully include all three principal entities involved in the security context. In this 
paper we propose a beyond-3G Privacy Enhanced 3-Way Authentication ... 

Keywords: access security, entity authentication, wireless privacy 
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Searchable symmetric encryption (SSE) allows a party to outsource the storage of its 
data to another party (a server) in a private manner, while maintaining the ability to 
selectively search over it. This problem has been the focus of active research ... 
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An XML web service is, to a first approximation, an RPC service in which requests and 
responses are encoded in XML as SOAP envelopes, and transported over HTTP. We 
consider the problem of authenticating requests and responses at the SOAP-level, 
rather ... 
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ReAgents are remotely executing agents that customize Web browsing for non-standard 
clients. A reAgent is essentially a one-shot" mobile agent that acts as an extension of a 
client dynamically launched by the client to run on its behalf at a remote more ... 
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XQuery is a powerful and convenient language that is designed for querying the data in 
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XML documents. In this paper, we address how to optimally query encrypted XML 
documents using XQuery, with the key point being how to eliminate redundant 
decryption ... 
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Human Desoxyribo-Nucleic Acid (DNA) sequences offer a wealth of information that 
reveal, among others, predisposition to various diseases and paternity relations. The 
breadth and personalized nature of this information highlights the need for privacy- 
preserving ... 
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Ubiquitous computing uses a variety of information for which access needs to be 
controlled. For instance, a person's current location is a sensitive piece of information 
that only authorized entities should be able to learn. Several challenges arise ... 
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Access control can be used to ensure that database queries pertaining to sensitive 
information are not answered. This is not enough to prevent users from learning sensitive 
information though, because users can combine non-sensitive information to discover ... 

Keywords: inference control, oblivious transfer, private information retrieval 
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WS-SecurityPolicy is a declarative configuration language for driving web services 
security mechanisms. We describe a formal semantics for WS-SecurityPolicy, and 
propose a more abstract link language for specifying the security goals of web services ... 
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The polymorphic variety of Internet worms presents a formidable challenge to network 
intrusion detection and methods designed to extract payload signatures for worm 
containment. Recently, several systems, including Earlybird and Polygraph, have been ... 
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In J2EE and .NET roles are assigned to methods using external configuration files, called 
the deployment descriptors. Assigning roles to methods, although conceptually simple, in 
practice it is quite complicated. For instance, in order for a deployer ... 
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Dolev and Yao initiated an approach to studying cryptographic protocols which abstracts 
from possible problems with the cryptography so as to focus on the structural aspects of 
the protocol. Recent work in this framework has developed easily applicable ... 
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Insider attack is one of the most serious cybersecurity threats to corporate America. 
Among all insider threats, information theft is considered the most damaging in terms of 
potential financial loss. Moreover, it is also especially difficult to detect ... 
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Injecting binary code into a running program is a common form of attack. Most defenses 
employ a "guard the doors" approach, blocking known mechanisms of code injection. 
Randomized instruction set emulation (RISE) is a complementary ... 
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